Threats Tagged 'ghsa-x35f-9fpp-c2h4'

An incorrect authorization vulnerability exists in the SiteIsolation feature of Google Chrome versions prior to 153.0.8010.36. This flaw allows a remote attacker who has already compromised the renderer process to bypass system access restrictions by leveraging a crafted HTML page. The vulnerability is rated medium severity by Chromium security. There are no known exploits reported in the wild and no CVSS score is available.